[Home] [Headlines] [Latest Articles] [Latest Comments] [Post] [Sign-in] [Mail] [Setup] [Help]
Status: Not Logged In; Sign In
Science/Tech See other Science/Tech Articles Title: New Computer Vulnerabilities Handler's Diary November 29th 2006 previous - New Adobe vulnerability Published: 2006-11-29, Last Updated: 2006-11-29 18:34:37 UTC by Toby Kohlenberg (Version: 1) Frank Klein has written to let us know that there are new vulnerabilities in Adobe Acrobat and Acrobat Reader that have the potential for code execution as a result of incorrect argument handling in the ActiveX control for IE. There is no patch currently available and Adobe is offering a mitigation of deleting the control. FrSIRT has provided a kill bit option that you can set that should disable the control. The vulnerable versions are: Adobe Standard, Reader & Professional 7.0.0 - 7.0.8 http://www.frsirt.com/english/advisories/2006/4751 http://www.adobe.com/support/security/advisories/apsa06-02.html Week of Oracle bugs cancelled Published: 2006-11-29, Last Updated: 2006-11-29 16:50:22 UTC by Toby Kohlenberg (Version: 1) Argeniss has cancelled the week of Oracle bugs due to "many problems". http://www.argeniss.com/woodb.html We are left to our own imaginations to figure out what those might be. New Vulnerability Announcement and patches from Apple Published: 2006-11-29, Last Updated: 2006-11-29 08:28:50 UTC by Toby Kohlenberg (Version: 1) Apple has just released a new security update with a large number of vulnerabilities fixed. Full details are available at: http://docs.info.apple.com/article.html?artnum=304829 Here are the packages updated: AirPort - CVE-ID: CVE-2006-5710 * ATS - CVE-ID: CVE-2006-4396 ATS - CVE-ID: CVE-2006-4398 ATS - CVE-ID: CVE-2006-4400 * CFNetwork - CVE-ID: CVE-2006-4401 ClamAV - CVE-ID: CVE-2006-4182 * Finder - CVE-ID: CVE-2006-4402 * ftpd - CVE-ID: CVE-2006-4403 gnuzip - CVE-ID: CVE-2006-4334, CVE-2006-4335, CVE-2006-4336, CVE-2006-4337, CVE-2006-4338 Installer - CVE-ID: CVE-2006-4404 OpenSSL - CVE-ID: CVE-2006-2937, CVE-2006-2940, CVE-2006-3738, CVE-2006-4339, CVE-2006-4343 perl - CVE-ID: CVE-2005-3962 * PHP - CVE-ID: CVE-2006-1490, CVE-2006-1990 * PHP - CVE-ID: CVE-2006-5465 * PPP - CVE-ID: CVE-2006-4406 * Samba - CVE-ID: CVE-2006-3403 Security Framework - CVE-ID: CVE-2006-4407 Security Framework - CVE-ID: CVE-2006-4408 Security Framework - CVE-ID: CVE-2006-4409 Security Framework - CVE-ID: CVE-2006-4410 VPN - CVE-ID: CVE-2006-4411 WebKit - CVE-ID: CVE-2006-4412 * * Potential code execution as defined & stated by Apple
Post Comment Private Reply Ignore Thread Top Page Up Full Thread Page Down Bottom/Latest
#1. To: All (#0)
I'm getting 15 firewall hits a minute. Busy day for the trojans and attackers ;) I've had 1500 since 11AM this morning.
|
||
[Home]
[Headlines]
[Latest Articles]
[Latest Comments]
[Post]
[Sign-in]
[Mail]
[Setup]
[Help]
|